Not logged in on mapped domain

Hi.

One of the great features of a WP network is that I can log in for the whole network. Meaning I'm still logged in with the same username when I browse the network (my tool bar displayed on all blogs for instance).

Now I'm using Domain Mapping plugin, which works great, but I'm loosing my session on all mapped domains. I can even log in with another username on those blogs!

Comment 1

We have found in previous threads that this is caused by cookies and cannot be overcome without opening other security risks.

I'll explain, when visiting or logging into a MultiSite using the main domain or sub domain thereof, one is cookied with that domain and you are recognized across the network because the cookie informs WordPress that you are in fact authenticated.

When you go to a Mapped Domain it is no longer relative to the original or main domain and therefore WordPress no longer recognizes that you have indeed authenticated.

Now we have explored getting around this but then one would need to be cookied all at one time for every mapped domain in the network. In addition, this would open up massive security holes.

Therefore this is not instituted and I am sure you can understand why. Example: An admin of mappeddomain1.com logs in and is cookied with all domains and now can log into any of the domains within the network and modify the contents therein.

i hope this helps give a clear understanding why this practice is not done.

How do you rate me?

Thank you for rating your experience!

We’re thrilled to hear you had a great experience with . Would you like to leave a comment about your experience?
Thanks for voting on your experience with , we’d love to get some feedback please.
Ohh no! We’re really sorry to hear you didn’t have a pleasant experience with , we’re always looking at how we can improve and would appreciate you provide some further feedback here please.
Type your feedback here

it's great that you had a positive one. Based on your experience in this ticket would you please be kind enough to rate us externally on: